Information Security Architect: Secure-by-Design & Cloud

HESTA Super Fund; City of Melbourne; On-site; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Extra leave

Volunteer leave

Parental leave 20 weeks

Professional development

Health & wellbeing benefits

Superannuation support

Job summary

HESTA Super Fund is expanding its Information Security/Cybersecurity team to shape security architecture and embed Secure-by-Design and Zero Trust across the organisation. You will advise across technology, data, cloud initiatives and enable safe AI/ML adoption while aligning with Australian standards.

The role focuses on maturing security architecture, embedding capabilities, and influencing architecture decisions in a highly regulated environment.

Qualifications

• Experience delivering security architecture in cloud-first environments.
• Strong track record embedding Secure-by-Design and Zero Trust in delivery.
• Expertise across cloud security architecture (AWS, Azure, GCP).
• Experience with threat modelling, architecture reviews, and security assessments.

Responsibilities

• Develop and evolve the Enterprise Security Architecture Framework aligned to NIST, ISO 27001, APRA CPS 234.
• Define security standards, reference architectures, control baselines across apps, data and infra.
• Provide security architecture advice across major tech and digital initiatives.
• Conduct architecture reviews and threat modelling to identify risks and mitigations.
• Embed security into SDLC, DevOps, CI/CD and cloud delivery with guardrails.

Skills

Security architecture

Zero Trust

Cloud security

Threat modelling

AI security

AWS/Azure/GCP

Education

Cybersecurity/IT/CS degree

Tools

AWS

Azure

GCP

Job description

HESTA Super Fund is expanding its Information Security/Cybersecurity team to shape security architecture and embed Secure-by-Design and Zero Trust across the organisation. You will advise across technology, data, cloud initiatives and enable safe AI/ML adoption while aligning with Australian standards.

The role focuses on maturing security architecture, embedding capabilities, and influencing architecture decisions in a highly regulated environment.